The client is an agri-trading company headquartered in Switzerland and offices spread across the globe. They had embarked on a cloud journey to move 15+ data centers across the globe to a single vendor. As part of this transformation journey client was keen to put in place a robust process and technical controls to protect confidential data.
Infosys defined an integrated data protection solution and effective governance for a holistic data security.
Key Challenges
- Limited visibility and traceability of sensitive data usage due to lack of documented processes for data lifecycle management
- Improper categorization and control mechanism of data due to absence of data discovery and classification solutions
- No data security governance policies and processes for effective data protection
The Solution
Classification and protection of sensitive data
- Identified gaps related to data security in existing data processing landscape
- Conducted data classification and documented SOPs for information transfer
- Identified and mapped security controls and industry best practices for data classification and protection
- Defined a holistic data protection solution integrating data classification, data loss prevention, Information Right Management (IRM) and Cloud Access Security Broker (CASB) solution
- Integrated all data security solutions into centralized SIEM, ticketing and analytic tools for effective governance and incident management
- Conducted user awareness training to ensure scalability of solution
- Built effective governance and IT strategy to meet regulatory compliance
Benefits
Intelligent use of analytics to classify data
Unified data protection across on-premise and cloud environments
Increased visibility of confidential data thereby improving the data protection capabilities
Enhanced and automated reporting using analytics and other tools
Reduced false positives with effective incident correlation
